Howard Chu
|
e223d0b124
|
ITS#6053 must use gnutls_x509_privkey_init()
|
2009-04-11 03:53:26 +00:00 |
|
Howard Chu
|
94ab6a31b2
|
ITS#6038 revert prev commits, ITS rejected
|
2009-03-27 11:07:42 +00:00 |
|
Rein Tollevik
|
c8cf2fc47a
|
ITS#6038: Write slapadd progress meter to stdout.
|
2009-03-26 22:50:54 +00:00 |
|
Howard Chu
|
d39bd12e9f
|
Skip redundant PACKETS logging
|
2009-03-13 23:10:37 +00:00 |
|
Howard Chu
|
d8e3b4e83e
|
ITS#6005 crypt salt_format must use ber_memfree
|
2009-03-09 01:28:00 +00:00 |
|
Howard Chu
|
02b71d58ec
|
ITS#6005 strings returned to slapd must use ber_mem*
|
2009-03-08 00:11:25 +00:00 |
|
Howard Chu
|
5d74bea520
|
ITS#6005 librewrite must use the same mem allocators as slapd
|
2009-03-07 23:21:26 +00:00 |
|
Howard Chu
|
0ba084d8b0
|
More cleanup
|
2009-03-05 09:15:02 +00:00 |
|
Howard Chu
|
c3f8e67615
|
Tweak prev commit
|
2009-03-05 09:13:26 +00:00 |
|
Howard Chu
|
9bc829dbef
|
ITS#5991 build cert chain, GnuTLS doesn't do it for us
|
2009-03-05 08:04:49 +00:00 |
|
Howard Chu
|
54ed3779d6
|
ITS#5992 trust X509v1 CA certs
|
2009-03-05 04:35:49 +00:00 |
|
Howard Chu
|
bd312123d6
|
ITS#5980 clear res_matched after successfully chasing referral
|
2009-03-03 17:57:24 +00:00 |
|
Howard Chu
|
ee5b6762ae
|
ITS#5980 - find_connection should match URLs with empty hostname
|
2009-03-03 17:56:44 +00:00 |
|
Howard Chu
|
a1861fd162
|
ITS#5849 patch was wrong, don't X509_free session cert
|
2009-03-02 17:43:38 +00:00 |
|
Howard Chu
|
c3cff40c1c
|
ITS#5981 fix GnuTLS TLSVerifyClient try
|
2009-03-02 03:01:41 +00:00 |
|
Howard Chu
|
e5e9191aeb
|
ITS#5976 check for cert/DN
|
2009-02-25 21:48:10 +00:00 |
|
Howard Chu
|
64884e7c6c
|
Don't call NSS_Shutdown if someone else init'd the library
|
2009-02-25 10:14:00 +00:00 |
|
Pierangelo Masarati
|
0d6e859846
|
fix ldap namespace (part of ITS#5974)
|
2009-02-24 21:09:41 +00:00 |
|
Pierangelo Masarati
|
ed97e96944
|
re-fix ITS#5916
|
2009-02-20 01:07:00 +00:00 |
|
Quanah Gibson-Mount
|
3b743a3b79
|
Revert part of last commit
Remove erroneous comment
|
2009-02-17 21:47:09 +00:00 |
|
Quanah Gibson-Mount
|
83cb8883a6
|
More for ITS#5955
Also special case rand file bits that are OpenSSL only
|
2009-02-17 21:39:50 +00:00 |
|
Quanah Gibson-Mount
|
331a57fa37
|
ITS#5955
|
2009-02-17 21:32:09 +00:00 |
|
Pierangelo Masarati
|
040f945d36
|
fix misc warnings
|
2009-02-15 21:59:16 +00:00 |
|
Howard Chu
|
f38d2df19b
|
Add comments about ITS#3134, #5938, RFC4513 for posterity. This
file will be moving to the Attic...
|
2009-02-11 01:35:56 +00:00 |
|
Howard Chu
|
07e79f26a4
|
Revert prev commit
|
2009-02-10 21:29:56 +00:00 |
|
Howard Chu
|
b886c2ad8a
|
ITS#5937 fix ancient IPv6 typo
|
2009-02-10 13:27:22 +00:00 |
|
Pierangelo Masarati
|
2b95e7d288
|
partially addresses an issue with ITS#5931
|
2009-02-10 12:44:12 +00:00 |
|
Howard Chu
|
80c6ea52ea
|
ITS#5853 restructure wait4msg / try_read1msg again. Consolidate
the two try_read1msg cases into one, bump refcnts to prevent
lconn's from being freed prematurely.
|
2009-02-10 09:51:31 +00:00 |
|
Howard Chu
|
fbf42baefa
|
ITS#5934 fix NULL pointer deref
|
2009-02-09 21:14:46 +00:00 |
|
Howard Chu
|
4bc8cb6336
|
ITS#5928 hide all ldap_pvt_tls APIs when !HAVE_TLS
|
2009-02-08 03:25:48 +00:00 |
|
Howard Chu
|
bc486f123d
|
Fix spinner in prev commit
|
2009-02-05 10:07:20 +00:00 |
|
Howard Chu
|
d0515c4017
|
ITS#5922 with namespace changes
|
2009-02-05 09:38:07 +00:00 |
|
Howard Chu
|
ff8838aa28
|
ITS#5920 restore old HAS_TLS test
|
2009-02-04 08:56:04 +00:00 |
|
Howard Chu
|
2b08e96b53
|
ITS#5916 - externally callable functions are ldap_pvt, not ldap_int.
|
2009-02-02 21:14:34 +00:00 |
|
Pierangelo Masarati
|
0ded1f16d5
|
Allow alias dereferencing in search C API; use new API in proxy backends (ITS#5916)
|
2009-01-31 10:27:07 +00:00 |
|
Hallvard Furuseth
|
ff08c4194c
|
Cleanup - macroize magic constant (ITS#5909)
|
2009-01-30 14:14:22 +00:00 |
|
Howard Chu
|
7aa5ae49ca
|
Modular TLS
|
2009-01-27 01:01:41 +00:00 |
|
Howard Chu
|
08905d6792
|
ITS#5789 again
|
2009-01-26 21:08:55 +00:00 |
|
Howard Chu
|
f59ce2b9a1
|
ITS#5462 add randfile support for gcrypt 1.4
|
2009-01-26 03:41:27 +00:00 |
|
Howard Chu
|
2558951251
|
ITS#5887 add native support for cipher suites for GnuTLS >= 2.2.0
|
2009-01-26 03:21:16 +00:00 |
|
Howard Chu
|
f9fd0f0cc4
|
ITS#5655 for new structure
|
2009-01-26 02:16:46 +00:00 |
|
Howard Chu
|
4dff3e6807
|
Switch to using modular TLS code, single-implementation version
|
2009-01-26 02:06:45 +00:00 |
|
Howard Chu
|
988fb232d2
|
ITS#5896 don't return immediately on Intermediate responses
|
2009-01-24 07:18:35 +00:00 |
|
Howard Chu
|
cf1558659b
|
ITS#5655 TLS_PROTOCOL_MIN from Philip Guenther
|
2009-01-24 03:34:49 +00:00 |
|
Kurt Zeilenga
|
4af9eb9715
|
Update copyright notices
|
2009-01-22 00:40:04 +00:00 |
|
Ralf Haferkamp
|
af79710c4d
|
Fixed typo
|
2008-12-12 10:08:07 +00:00 |
|
Pierangelo Masarati
|
7681642bcf
|
fix LDAP deref control response; fix tool response handling; add lutil_memcopy() for API uniformity (more about ITS#5768)
|
2008-12-11 23:17:08 +00:00 |
|
Ralf Haferkamp
|
5977f20127
|
Avoid locking up slapd when paused during shutdown (ITS#5841), reverting
r1.81
|
2008-12-09 10:57:15 +00:00 |
|
Howard Chu
|
187efdad6c
|
ITS#5849 free peer cert after retrieving DN
|
2008-12-05 09:00:24 +00:00 |
|
Howard Chu
|
5a8954f9de
|
ITS#5768 - add deref.
|
2008-11-25 04:43:38 +00:00 |
|
Howard Chu
|
a6933cae27
|
Fix prev commit
|
2008-11-21 05:15:20 +00:00 |
|
Howard Chu
|
86b5de38be
|
ITS#5812 add SASL_NOCANON / -N option
|
2008-11-21 03:30:15 +00:00 |
|
Howard Chu
|
0bd6ce1062
|
ITS#4750 only read LDAP_CONF_FILE if geteuid() != getuid()
|
2008-11-21 02:15:47 +00:00 |
|
Pierangelo Masarati
|
2eeefd4985
|
check for bogus params to an LDAP routine (ITS#5817)
|
2008-11-18 16:27:50 +00:00 |
|
Hallvard Furuseth
|
c7002ffed5
|
ITS#5815: Fix typo "#elif defined( MAXHOSTNAMELEN".
|
2008-11-16 22:52:56 +00:00 |
|
Howard Chu
|
36124c715a
|
ITS#5789 GNUtls - allow CN matches against IP addresses
|
2008-11-04 11:21:52 +00:00 |
|
Howard Chu
|
24078323e2
|
ITS#5739 fix for ITS#4879 was too eager about IPv6 detection
|
2008-11-03 15:44:49 +00:00 |
|
Hallvard Furuseth
|
8690650121
|
ITS#4467: Fix ptr += snprintf buffer overflow tests (made out-of-range ptr).
Also avoid a buf[BUFSIZ] initialization.
|
2008-10-24 13:11:10 +00:00 |
|
Pierangelo Masarati
|
6bedf74c41
|
tag optional stuff
|
2008-10-22 23:38:09 +00:00 |
|
Pierangelo Masarati
|
91e14ca638
|
add support for (experimental) dereference control (ITS#5768); need to re-run autoconf (and autoheader?)
|
2008-10-22 22:19:49 +00:00 |
|
Pierangelo Masarati
|
2b95616768
|
missing $OpenLDAP$ header
|
2008-10-22 21:57:28 +00:00 |
|
Hallvard Furuseth
|
677a11ad26
|
ITS#5748: tavl_find3(NULL,,,) returned undefined data
|
2008-10-22 19:39:42 +00:00 |
|
Ralf Haferkamp
|
e8c1147b77
|
reset ld->ld_errno to avoid returning error codes of previously API calls (ITS#5762)
|
2008-10-21 16:17:41 +00:00 |
|
Hallvard Furuseth
|
08852acb80
|
Warning cleanup: signed meets unsigned, remove assert(unsigned >= 0).
|
2008-10-17 23:24:48 +00:00 |
|
Hallvard Furuseth
|
b464a790b8
|
Fix Debug(%d, scred->bv_len or -1) -> Debug(%ld, (long) scred->bv_len or -1L).
Cast sasl_encode() arg from unsigned char* to char*.
Warning cleanup: signed meets unsigned.
|
2008-10-17 20:46:44 +00:00 |
|
Hallvard Furuseth
|
1c85cf3c88
|
Warning cleanup: signed meets unsigned. ber_flatten2() returns -1 on
error, not LBER_ERROR.
|
2008-10-13 08:44:54 +00:00 |
|
Hallvard Furuseth
|
03a729673c
|
Warning cleanup: signed meets unsigned.
|
2008-10-13 08:13:27 +00:00 |
|
Howard Chu
|
9078381252
|
Cleanup unused defs
|
2008-10-09 11:33:49 +00:00 |
|
Howard Chu
|
4294664aad
|
ITS#5369 SASL/GSSAPi refactoring from Stefan Metzmacher <metze@samba.org>
and Rafal Szczeniak <mimir@samba.org>, with minor cleanups
|
2008-10-09 11:10:28 +00:00 |
|
Howard Chu
|
f7484f78e6
|
ITS#5369 SASL/GSSAPi refactoring from Stefan Metzmacher <metze@samba.org>
and Rafal Szczeniak <mimir@samba.org>, with minor cleanups
|
2008-10-09 10:51:28 +00:00 |
|
Howard Chu
|
b2432fdbf2
|
Add SASL_MECHLIST option to retrieve list of known SASL mechs
|
2008-10-09 09:28:39 +00:00 |
|
Howard Chu
|
c51252633b
|
Accept X-starttls for prev commit
|
2008-10-07 03:13:00 +00:00 |
|
Howard Chu
|
809548c88b
|
Handle StartTLS in URL extensions
|
2008-10-07 03:06:44 +00:00 |
|
Howard Chu
|
99186a90e0
|
Fix prev commit
|
2008-09-30 22:22:31 +00:00 |
|
Howard Chu
|
721264db13
|
ITS#5720 fix ldap_utf8_strchr arguments
|
2008-09-30 05:05:53 +00:00 |
|
Ralf Haferkamp
|
0f4f9c9c13
|
Avoid "label at end of compound statement" error of newer gcc
|
2008-09-19 12:58:00 +00:00 |
|
Pierangelo Masarati
|
43ae03fc10
|
silence warnings
|
2008-09-16 14:10:02 +00:00 |
|
Pierangelo Masarati
|
548a9f39ba
|
fix '<hex>'H conversion issue; did not look at decimal yet (ITS#5699)
|
2008-09-13 18:46:50 +00:00 |
|
Howard Chu
|
178141d7ec
|
ITS#5668 avoid overflows in Windows microsecond computation
|
2008-09-11 01:51:02 +00:00 |
|
Pierangelo Masarati
|
4aa9edf03e
|
cleanup round of memory handling (either check results or use ch_* calls; ITS#5691)
|
2008-09-09 19:58:47 +00:00 |
|
Howard Chu
|
cc94023c98
|
ITS#5677 s/TLS_CRL/TLS_CRLFILE/
|
2008-09-02 22:10:44 +00:00 |
|
Howard Chu
|
0dbeb1d87b
|
Pass LDAPURLDescs to connect functions instead of host/port
|
2008-08-15 22:53:47 +00:00 |
|
Howard Chu
|
46049f1d13
|
Fix prev commit
|
2008-08-15 10:53:11 +00:00 |
|
Howard Chu
|
baad2b249d
|
Connect callbacks need error recovery checks
|
2008-08-15 10:23:29 +00:00 |
|
Howard Chu
|
80d1dba901
|
Add LDAP_OPT_CONNECT_CB connection callbacks
|
2008-08-14 04:54:32 +00:00 |
|
Howard Chu
|
a225b02f17
|
Modular TLS support, proof of concept. tls2.c would replace tls.c,
but I'm leaving tls.c intact for now.
|
2008-08-13 16:18:51 +00:00 |
|
Hallvard Furuseth
|
4028c83c67
|
ber_decode_oid(): Fix typo in comment
|
2008-08-06 13:36:53 +00:00 |
|
Hallvard Furuseth
|
4f935126c4
|
ITS#5604: Normalize lutil_progname(): strip .exe from Windows executable names
|
2008-07-22 10:16:11 +00:00 |
|
Howard Chu
|
7d479302c0
|
ITS#5615 return success on Solaris 10
|
2008-07-15 20:07:36 +00:00 |
|
Howard Chu
|
27fc008761
|
Protect errno values from Debug
|
2008-07-02 16:43:51 +00:00 |
|
Howard Chu
|
aebcd93721
|
ITS#5580: Revert prev commit, failed on byte-at-a-time input. Different
approach used here.
|
2008-07-02 01:33:15 +00:00 |
|
Howard Chu
|
7e4ba700f1
|
ITS#5585 GnuTLS key strength is in bytes, we expected bits
|
2008-06-30 23:32:35 +00:00 |
|
Howard Chu
|
14f1138ab5
|
ITS#5580 fix length decoding, verified with PROTOS
|
2008-06-27 02:36:41 +00:00 |
|
Howard Chu
|
9ef6cc3cd4
|
ITS#5577 GnuTLS CRL result >0 is success
|
2008-06-24 20:14:30 +00:00 |
|
Pierangelo Masarati
|
7e3c9a07e9
|
add client API for assertion control (ITS#5560)
|
2008-06-14 17:49:47 +00:00 |
|
Howard Chu
|
99160d7c20
|
ITS#5542 fix loop iterator
|
2008-05-30 17:29:47 +00:00 |
|
Howard Chu
|
19d7e565f0
|
ITS#5318 drop invalid msgids, cleanup msgid logging
|
2008-05-28 01:19:43 +00:00 |
|
Howard Chu
|
96550c885d
|
ITS#5518,#5525 cleanup ld_defconn if it was freed
|
2008-05-23 09:53:42 +00:00 |
|
Howard Chu
|
ce27143ce7
|
ITS#5519 add missing stubs
|
2008-05-20 11:23:19 +00:00 |
|
Hallvard Furuseth
|
1fc3f1c130
|
ITS#5507: Set FD_CLOEXEC (close on exec) flag on LDAP file descriptors
|
2008-05-15 20:56:41 +00:00 |
|